This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1fLXWj8IJNrRYTJOPZa5KwxcxOg.roa File: 1fLXWj8IJNrRYTJOPZa5KwxcxOg.roa (raw, json) Hash identifier: zb2crwQ8RosCcuvt69/2Tp/CpC0L8BiDaujlS8mh+j0= Subject key identifier: D5:F2:D7:5A:3F:08:24:DA:D1:61:32:4E:3D:96:B9:2B:0C:5C:C4:E8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AFD93C43B4FC322D2D3D3A58100286B3C Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1fLXWj8IJNrRYTJOPZa5KwxcxOg.roa Signing time: Mon 08 Dec 2025 10:48:30 +0000 ROA not before: Mon 08 Dec 2025 10:48:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210064 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:93:c4:3b:4f:c3:22:d2:d3:d3:a5:81:00:28:6b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 8 10:48:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d5f2d75a3f0824dad161324e3d96b92b0c5cc4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:50:36:87:07:b1:94:6c:2f:df:34:bc:1c: 92:e7:a8:e3:5c:c3:96:6d:c0:27:8b:2d:1a:72:31: 60:5c:8f:86:cc:f9:fb:b3:86:e2:0c:bd:9e:a0:3b: 19:49:0d:a1:f3:c9:56:f5:3d:91:87:19:cf:c8:13: d8:13:9d:c1:3c:e4:25:7f:95:81:b8:33:f4:3b:c7: 74:47:c2:48:9a:f8:ff:aa:57:e0:c6:dd:43:f8:3d: 16:69:f3:46:ba:ed:af:99:a7:d9:9c:f7:48:80:44: 42:3d:3a:31:5a:6e:c2:92:a2:d1:26:69:57:53:45: 1e:39:da:55:7f:b5:e9:88:85:a2:84:f6:34:6a:07: 83:3d:9a:6c:da:e3:d3:29:89:c2:44:69:3b:98:d3: 0a:c7:65:fb:68:03:27:84:a9:88:69:a0:66:39:2e: 5a:da:c7:f8:fc:89:7e:bf:30:be:4a:51:cf:45:d7: 2c:0a:90:f9:97:57:f0:89:f5:5b:9d:41:d3:aa:a8: cf:9f:e9:1b:bb:13:de:93:0e:dc:c3:2c:e4:41:70: d9:ba:d0:8b:3d:d1:19:c2:01:78:1a:10:0d:8e:21: ad:e6:0e:86:d1:ff:07:51:c6:63:e3:a3:92:e2:09: 26:c8:fd:3f:1f:23:1b:94:cd:13:a5:16:c5:55:1d: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:D7:5A:3F:08:24:DA:D1:61:32:4E:3D:96:B9:2B:0C:5C:C4:E8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1fLXWj8IJNrRYTJOPZa5KwxcxOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 28:7b:c0:e9:53:a6:bf:10:22:59:48:8b:6a:e0:f3:d4:e0:7e: 8a:f5:58:8a:51:16:00:9c:48:cc:3a:14:f3:cd:7d:a7:4b:c9: 86:b4:e4:51:90:6e:bb:a5:61:01:cd:4d:a6:ab:b4:c2:7e:39: c4:2d:f4:76:19:5d:85:47:6a:ed:48:db:ea:72:8b:e6:3a:6d: 27:f3:d1:e9:8b:79:4f:97:69:ec:24:43:50:8f:4c:e4:97:3a: 21:08:63:1c:14:5c:61:f6:98:e1:ab:6a:63:6d:0c:6b:87:42: e0:e3:c6:78:6a:60:5b:89:cb:79:2d:01:c7:aa:92:71:eb:1b: cd:de:fd:03:ec:8a:39:67:f3:fb:a6:c8:7e:20:3c:61:2e:bb: 73:88:be:1c:eb:9d:72:de:f2:3e:fc:e5:3f:fd:fa:72:2b:f4: 82:23:dd:42:47:ad:eb:71:ce:c7:e9:1b:ca:ec:2c:94:3e:9b: 9a:32:f7:60:56:95:0a:a2:45:7b:fe:4c:66:72:42:43:26:cf: a6:a1:84:3c:e9:c5:5a:df:30:0a:40:67:19:81:95:ce:ae:2a: 5f:ae:8c:c7:d0:0c:77:85:e0:2e:48:6b:c2:7f:bc:9f:1e:dc: 72:7a:8c:01:ff:74:80:35:bc:29:ec:32:1d:de:99:23:63:08: d5:c1:60:1d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZr9k8Q7T8Mi0tPTpYEAKGs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjA4MTA0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWYyZDc1YTNmMDgyNGRhZDE2MTMyNGUzZDk2YjkyYjBjNWNjNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2dQNocHsZRsL980vByS56jjXMOW bcAniy0acjFgXI+GzPn7s4biDL2eoDsZSQ2h88lW9T2RhxnPyBPYE53BPOQlf5WB uDP0O8d0R8JImvj/qlfgxt1D+D0WafNGuu2vmafZnPdIgERCPToxWm7CkqLRJmlX U0UeOdpVf7XpiIWihPY0ageDPZps2uPTKYnCRGk7mNMKx2X7aAMnhKmIaaBmOS5a 2sf4/Il+vzC+SlHPRdcsCpD5l1fwifVbnUHTqqjPn+kbuxPekw7cwyzkQXDZutCL PdEZwgF4GhANjiGt5g6G0f8HUcZj46OS4gkmyP0/HyMblM0TpRbFVR30WQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFNXy11o/CCTa0WEyTj2WuSsMXMToMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvMWZMWFdqOElKTnJSWVRKT1BaYTVLd3hjeE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRuQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQAoe8DpU6a/ECJZSItq4PPU4H6K9ViKURYAnEjM OhTzzX2nS8mGtORRkG67pWEBzU2mq7TCfjnELfR2GV2FR2rtSNvqcovmOm0n89Hp i3lPl2nsJENQj0zklzohCGMcFFxh9pjhq2pjbQxrh0Lg48Z4amBbict5LQHHqpJx 6xvN3v0D7Io5Z/P7psh+IDxhLrtziL4c651y3vI+/OU//fpyK/SCI91CR63rcc7H 6RvK7CyUPpuaMvdgVpUKokV7/kxmckJDJs+moYQ86cVa3zAKQGcZgZXOripfrozH 0Ax3heAuSGvCf7yfHtxyeowB/3SANbwp7DId3pkjYwjVwWAd -----END CERTIFICATE-----Generated at Wed Dec 10 08:59:57 2025 by rpki-client